Trend Micro survey: only 36% of organizations have 24x7 cybersecurity coverage; leadership accountability gaps persist
Trend Micro published research on 19 September 2024, based on a poll of 2,600 global IT leaders responsible for cybersecurity, showing that many organizations lack the resources and leadership buy-in to measure and mitigate attack surface risk. The top cyber-resilience gaps were 24x7x365 staffing (only 36% have it), attack surface risk management (ASRM) techniques (35%) and use of frameworks such as the NIST Cybersecurity Framework (34%). Some 48% of respondents said their leadership does not consider cybersecurity to be its responsibility, and 54% described their organization's attitude to cyber risk as inconsistent from month to month. Although 96% have concerns about their attack surface, 19% cannot work from a single source of truth. This is vendor survey research with no specific incident, vulnerability or threat actor, so it has no direct operational impact for defenders.
Detalhes técnicos
- Sample: 2,600 IT leaders at small, medium and large organizations worldwide.
- 36% worry about having a way to discover, assess and mitigate high-risk areas.
- 31% said responsibility for mitigating business risk rests with IT teams, indicating unclear reporting lines.
Remediação
- Trend's guidance: CISOs should communicate in terms of business risk to engage boards.
- Maintain a single source of truth across the attack surface, continuously monitor risk and automate remediation where possible.
Linha do tempo
-
Trend Micro survey: only 36% of organizations have 24x7 cybersecurity coverage; leadership accountability gaps persist
ler a análise desta fonte ocultar
Trend Micro published research on 19 September 2024, based on a poll of 2,600 global IT leaders responsible for cybersecurity, showing that many organizations lack the resources and leadership buy-in to measure and mitigate attack surface risk. The top cyber-resilience gaps were 24x7x365 staffing (only 36% have it), attack surface risk management (ASRM) techniques (35%) and use of frameworks such as the NIST Cybersecurity Framework (34%). Some 48% of respondents said their leadership does not consider cybersecurity to be its responsibility, and 54% described their organization's attitude to cyber risk as inconsistent from month to month. Although 96% have concerns about their attack surface, 19% cannot work from a single source of truth. This is vendor survey research with no specific incident, vulnerability or threat actor, so it has no direct operational impact for defenders.
Technical Details
- Sample: 2,600 IT leaders at small, medium and large organizations worldwide.
- 36% worry about having a way to discover, assess and mitigate high-risk areas.
- 31% said responsibility for mitigating business risk rests with IT teams, indicating unclear reporting lines.
Remediation
- Trend's guidance: CISOs should communicate in terms of business risk to engage boards.
- Maintain a single source of truth across the attack surface, continuously monitor risk and automate remediation where possible.